Static task
static1
Behavioral task
behavioral1
Sample
3cccb4fd738914dddf357c5822e45cd7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3cccb4fd738914dddf357c5822e45cd7_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3cccb4fd738914dddf357c5822e45cd7_JaffaCakes118
-
Size
951KB
-
MD5
3cccb4fd738914dddf357c5822e45cd7
-
SHA1
343090d50a775682dfb1b8de3e33783000d26a20
-
SHA256
1a3c3550cfb858c5fb9a39ef443fa13b8f41f819414846a4257aabe9bd9f46e7
-
SHA512
c08f37fcabc1e824b16a8eba29bddf69d0ba1aa2723e97cdecb60ebf6ef3eac5fe2419d6f245d48e40730fcf589592a64e69029f121eceb6ad5889d3f66aca93
-
SSDEEP
12288:A/Zesjo09/mLP7kLwuIgu068VjpejOwZFhvRzvcaFIfY1S:KZsDLP7Eu0N9ZMvRz0amg1S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3cccb4fd738914dddf357c5822e45cd7_JaffaCakes118
Files
-
3cccb4fd738914dddf357c5822e45cd7_JaffaCakes118.exe windows:5 windows x86 arch:x86
925d362749f35a99df945c5c3073a59f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
GetVersionExA
LoadLibraryA
HeapAlloc
InterlockedExchange
HeapAlloc
VirtualAlloc
InterlockedIncrement
DeleteCriticalSection
VirtualProtect
GetProcessHeap
GetSystemTimeAsFileTime
VirtualProtect
GetModuleFileNameA
CreateFileW
InterlockedDecrement
GetSystemTimeAsFileTime
SetLastError
HeapAlloc
lstrcmpiW
GetCurrentProcessId
GetProcAddress
ReadFile
InterlockedCompareExchange
GetModuleHandleA
LeaveCriticalSection
lstrlenA
GetModuleHandleA
GetModuleFileNameW
GetModuleHandleA
MultiByteToWideChar
GetCurrentThreadId
GetVersionExA
VirtualAlloc
VirtualAlloc
GetSystemTimeAsFileTime
InterlockedIncrement
GetModuleHandleA
VirtualProtect
HeapDestroy
VirtualProtect
CloseHandle
CreateFileW
GetLastError
MultiByteToWideChar
InterlockedIncrement
FreeLibrary
GetModuleHandleA
InitializeCriticalSection
GetTickCount
VirtualAlloc
DeleteCriticalSection
lstrcmpiW
MultiByteToWideChar
ReadFile
GetProcessHeap
InterlockedIncrement
lstrcmpiW
InterlockedCompareExchange
GetCurrentThreadId
LocalFree
LoadLibraryA
DisableThreadLibraryCalls
MultiByteToWideChar
EnterCriticalSection
LoadLibraryW
InterlockedExchange
LeaveCriticalSection
QueryPerformanceCounter
EnterCriticalSection
user32
GetFocus
CreateWindowExW
PeekMessageW
IsDlgButtonChecked
MessageBoxW
GetDesktopWindow
GetDlgItem
SetFocus
GetParent
PostQuitMessage
BeginPaint
SetWindowTextW
IsWindow
BeginPaint
LoadStringW
SendMessageW
DefWindowProcW
EndDialog
BeginPaint
GetWindowLongW
wsprintfA
PeekMessageW
SetForegroundWindow
GetDC
IsWindow
KillTimer
SetForegroundWindow
IsDlgButtonChecked
GetWindowLongW
SetWindowTextW
SetCursor
GetSystemMetrics
EnableWindow
TranslateMessage
wsprintfA
PeekMessageW
SetFocus
BeginPaint
EnableWindow
SetWindowPos
IsWindow
LoadStringW
EndPaint
ReleaseDC
GetClientRect
SetFocus
wsprintfA
DefWindowProcW
SetTimer
GetDesktopWindow
SetWindowTextW
GetFocus
GetWindowRect
SetTimer
GetWindowLongW
wsprintfA
SetDlgItemTextW
GetParent
SetWindowLongW
KillTimer
Sections
.text Size: 945KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ